$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/df54cf30-734d-3baa-8c6e-dcfac4bc2e2d.roa File: df54cf30-734d-3baa-8c6e-dcfac4bc2e2d.roa (raw, json) Hash identifier: 7xgQMsZBEEZRtBQBvqllYmqWz1gdRde3nRwjX467HK4= Subject key identifier: 82:EC:9A:46:73:C4:C3:0B:F1:53:E8:64:51:9C:7C:85:DE:1E:06:65 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D3DFFDA4AB5D46B5F48701780 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/df54cf30-734d-3baa-8c6e-dcfac4bc2e2d.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 396574 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:da:4a:b5:d4:6b:5f:48:70:17:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=1ccbba5b-337d-498b-aaf1-56c09329d3f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:a9:0d:ce:0d:d5:9b:2d:f5:a5:65:e0:c0:27: 76:58:fb:f9:19:f3:d3:cf:8f:58:c2:2c:f4:eb:11: b9:4b:f0:c0:b7:dd:b6:f1:77:06:ff:44:e1:8c:f4: b0:15:74:0b:50:60:12:38:2b:16:60:cd:d3:c8:57: a4:12:78:ab:81:9f:f2:95:a3:b1:b5:81:a7:ec:f9: 5a:ec:1d:9c:ba:4e:ab:ed:d4:d5:11:dd:bf:99:73: 5e:e4:91:2f:57:c0:5d:4f:2c:d4:8b:63:ab:b5:57: a5:ea:f2:16:cf:4b:e3:fb:60:cf:92:ed:2f:8a:be: 50:a3:9f:9f:b4:0d:03:47:41:02:65:78:79:bc:62: 3f:67:67:b0:e0:cf:53:a9:f3:54:95:fb:f7:ed:94: a6:33:f9:64:c9:9e:b3:07:d6:2b:d6:71:2b:33:44: fd:57:c4:ec:84:59:a1:a9:f5:25:67:57:55:0e:a6: 50:cd:4d:2f:d6:90:9a:b4:cc:b4:1c:2c:ab:ac:33: 57:83:cb:40:0a:e1:eb:55:0b:05:40:3d:61:b8:db: 74:70:24:73:5c:61:10:fe:17:db:dd:2c:f6:0a:99: 47:ea:1d:60:31:ce:88:4e:bc:41:09:a5:c9:f4:b3: 89:7a:5a:6b:ad:fd:7c:ec:c0:a6:e4:da:dc:52:c3: 80:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:EC:9A:46:73:C4:C3:0B:F1:53:E8:64:51:9C:7C:85:DE:1E:06:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/df54cf30-734d-3baa-8c6e-dcfac4bc2e2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:5f:87:73:22:6a:8e:ec:e9:8c:c7:46:7e:5b:af:06:93:ad: d4:0b:0c:39:57:51:cb:b3:04:62:c7:30:ba:d0:03:b1:0a:56: 86:a5:38:56:1c:a6:13:8b:4b:68:db:04:9d:fb:c8:1a:e4:90: fb:3a:89:3f:1b:8f:fd:52:3e:9a:42:bf:b0:40:c2:4f:17:ae: f1:f5:84:31:b1:70:3d:0c:73:c0:6a:ef:8c:35:96:8b:2b:0e: 5c:34:98:f2:db:7e:72:8a:c1:7f:f9:47:74:fc:5d:55:25:b3: 97:6d:b2:95:03:0e:72:0a:cd:a4:be:38:a9:7e:1a:f6:83:90: be:3c:01:e5:b1:46:ce:17:7d:e5:29:7f:2d:66:0f:07:19:77: 1c:db:89:00:02:3f:e3:32:ba:21:25:ca:0e:2a:0d:2f:b5:ff: 42:d7:8d:05:d4:7f:e6:d0:04:cb:4f:d9:1e:8a:aa:bd:0f:36: bb:b9:72:43:d3:a5:85:cb:85:6e:4a:69:5d:f6:a6:0b:4d:78: 3f:4e:bd:b7:00:fc:1b:be:10:4a:9f:4b:d8:23:1e:86:4b:e6: 1e:ff:64:b0:68:7f:36:5b:32:0c:6f:7c:1e:d9:66:a0:61:10: 3b:9c:2e:3b:da:ad:4e:35:2a:b7:32:13:78:8b:bd:b5:e6:74: 94:5e:9b:6e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE09/9pKtdRrX0hwF4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk MWNjYmJhNWItMzM3ZC00OThiLWFhZjEtNTZjMDkzMjlkM2Y0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2KkNzg3Vmy31pWXgwCd2WPv5GfPTz49Ywiz0 6xG5S/DAt9228XcG/0ThjPSwFXQLUGASOCsWYM3TyFekEnirgZ/ylaOxtYGn7Pla 7B2cuk6r7dTVEd2/mXNe5JEvV8BdTyzUi2OrtVel6vIWz0vj+2DPku0vir5Qo5+f tA0DR0ECZXh5vGI/Z2ew4M9TqfNUlfv37ZSmM/lkyZ6zB9Yr1nErM0T9V8TshFmh qfUlZ1dVDqZQzU0v1pCatMy0HCyrrDNXg8tACuHrVQsFQD1huNt0cCRzXGEQ/hfb 3Sz2CplH6h1gMc6ITrxBCaXJ9LOJelprrf187MCm5NrcUsOAmwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFILsmkZzxMML8VPoZFGcfIXeHgZlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGY1NGNmMzAtNzM0ZC0z YmFhLThjNmUtZGNmYWM0YmMyZTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAzX4dzImqO7OmMx0Z+W68Gk63UCww5V1HLswRixzC60AOxClaGpThW HKYTi0to2wSd+8ga5JD7Ook/G4/9Uj6aQr+wQMJPF67x9YQxsXA9DHPAau+MNZaL Kw5cNJjy235yisF/+Ud0/F1VJbOXbbKVAw5yCs2kvjipfhr2g5C+PAHlsUbOF33l KX8tZg8HGXcc24kAAj/jMrohJcoOKg0vtf9C140F1H/m0ATLT9keiqq9Dza7uXJD 06WFy4VuSmld9qYLTXg/Tr23APwbvhBKn0vYIx6GS+Ye/2SwaH82WzIMb3we2Wag YRA7nC472q1ONSq3MhN4i7215nSUXptu -----END CERTIFICATE-----Generated at Thu Mar 26 13:51:56 2026 by rpki-client